Which of the following metrics would BEST measure the agility of an organization's IT function?

• A.Average number of learning and training hours per IT staff member
• B.Frequency of security assessments against the most recent standards and guidelines
• C.Average time to turn strategic IT objectives into an agreed upon and approved initiative
• D.Percentage of staff with sufficient IT-related skills for the competency required of their roles

Comment: *

Name: *

Email: *

Verification: *

An IS auditor found that a company executive is encouraging employee use of social networking sites for business purposes. Which of the following recommendations would BEST help to reduce the risk of data leakage?

• A.Monitoring employees social networking usage
• B.Requiring policy acknowledgment and nondisclosure agreements signed by employees
• C.Providing education and guidelines to employees on use of social networking sites
• D.Establishing strong access controls on confidential data

Comment: *

Name: *

Email: *

Verification: *

The role of the certificate authority (CA) as a third party is to:

• A.provide secured communication and networking services based on certificates.
• B.host a repository of certificates with the corresponding public and secret keys issued by that CA.
• C.act as a trusted intermediary between two communication partners.
• D.confirm the identity of the entity owning a certificate issued by that CA.

Comment: *

Name: *

Email: *

Verification: *

During the implementation of an enterprise resource planning (ERP) system, an IS auditor is reviewing the results of user acceptance testing (UAT). The auditor's PRIMARY focus should be to determine if:

• A.application interfaces have been satisfactorily tested.
• B.system integration testing was performed.
• C.all errors found in the testing process have been corrected.
• D.the business process owner has signed off on the results.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would MOST effectively control the usage of universal storage bus (USB) storage devices?

• A.Policies that require instant dismissal if such devices are found
• B.Software for tracking and managing USB storage devices
• C.Administratively disabling the USB port
• D.Searching personnel for USB storage devices at the facility's entrance

Comment: *

Name: *

Email: *

Verification: *